Nginx 反向代理配置

当用户请求将域名绑定到 IP:端口（例如：“绑定域名 claw.nul.qzz.io 到 127.0.0.1:18789”）时，创建 Nginx 配置：

1. 提取域名（例如：claw.nul.qzz.io）和目标地址（例如：127.0.0.1:18789）
2. 在 /etc/nginx/conf.d/{domain}.conf 生成 Nginx 配置文件：

server {
    listen 443 ssl;
    server_name {domain};

    ssl_certificate /etc/letsencrypt/live/{domain}/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/{domain}/privkey.pem;
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:50m;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
    ssl_prefer_server_ciphers off;

    location / {
        proxy_pass http://{target};
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

3. 如需支持 HTTP（非 HTTPS）协议：

server {
    listen 80;
    server_name {domain};
    location / {
        proxy_pass http://{target};
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

4. 执行以下命令：

sudo tee /etc/nginx/conf.d/{domain}.conf > /dev/null <<'EOF'

EOF
sudo nginx -t && sudo systemctl reload nginx

5. 如需启用 SSL，还需运行：

sudo certbot --nginx -d {domain}

6. 返回成功信息，并附带域名及目标地址详情。